https://bz.apache.org/bugzilla/show_bug.cgi?id=58303
--- Comment #3 from Felix Schumacher <[email protected]> --- When I used the test case with the old implementation, I found two further issues. First, the emailAddress (E) component would not be able to be parsed by the jdk X500Principal(String) constructor. I had to add a keywordMap with the name and oid pair to the constructor, to be able to parse cn=name, [email protected], ... Second, the DN from the cert is constructed (probably by bouncycastle) in reverse order. Staying with the DN from above, it would be ..., [email protected], cn=name I will commit the patch, that adds the keywordMap to the constructor, as I think this is a general problem and it will not change the overall behaviour of the code. The second problem is less of a concern, since the newer api will ignore the order of the DN components. -- You are receiving this mail because: You are the assignee for the bug.
